Performing Mac Address Authentication Locally; Related Concepts; Mac Address Authentication Timers; Quiet Mac Address - H3C S5100-SI Series Operation Manual

Operation Manual – MAC Address Authentication
H3C S5100-SI/EI Series Ethernet Switches
In fixed mode, the switch sends the user name and password previously
configured for the user to the RADIUS server for authentication.
A user can access a network upon passing the authentication performed by the
RADIUS server.

1.1.2 Performing MAC Address Authentication Locally

When authentications are performed locally, users are authenticated by switches. In
this case,
In MAC address mode, the local user name to be configured is the MAC address
of an access user, while the password may be the MAC address of the user or the
fixed password configured (which is used depends on your configuration).
Hyphens must or must not be included depending on the format configured with
the mac-authentication authmode usernameasmacaddress usernameformat
command; otherwise, the authentication will fail.
In fixed mode, all users' MAC addresses are automatically mapped to the
configured local passwords and usernames.
The service type of a local user needs to be configured as lan-access.

1.2 Related Concepts

1.2.1 MAC Address Authentication Timers

The following timers function in the process of MAC address authentication:
Offline detect timer: At this interval, the switch checks to see whether an online
user has gone offline. Once detecting that a user becomes offline, the switch
sends a stop-accounting notice to the RADIUS server.
Quiet timer: Whenever a user fails MAC address authentication, the switch does
not initiate any MAC address authentication of the user during a period defined by
this timer.
Server timeout timer: During authentication of a user, if the switch receives no
response from the RADIUS server in this period, it assumes that its connection to
the RADIUS server has timed out and forbids the user from accessing the
network.

1.2.2 Quiet MAC Address

When a user fails MAC address authentication, the MAC address becomes a quiet
MAC address, which means that any packets from the MAC address will be discarded
simply by the switch until the quiet timer expires. This prevents an invalid user from
being authenticated repeatedly in a short time.
Chapter 1 MAC Address Authentication
1-2
Configuration